Cybersecurity-Assessment Österreichischer Mobilfunknetze zur Verbesserung Kritischer Telekommunikationsinfrastruktur
The transition from 3G to 4G and 5G offers the opportunity to strengthen cybersecurity in Austria’s cellular networks, as these newer technologies come with enhanced security capabilities.
However, their increased complexity also raises the risk of misconfigurations, especially when systems are deployed under tight time constraints.
To address these challenges, TelCrit is working to improve transparency around mobile network technologies and their security settings. By identifying potential weaknesses and promoting better configurations, the project aims to make Austria’s mobile infrastructure more secure, reliable, and future-proof.
Abstract
Mobile networks play a vital role in everyday life, enabling personal communication, supporting businesses, and serving as a critical resource during emergencies.
With the phase-out of 3G and the widespread adoption of 4G and 5G, there is potential for significantly improved cybersecurity, as these newer technologies include more advanced security features.
However, in practice, these improvements often depend on proper configuration and are not necessarily active at all mobile network operators, which can have substantial effects on communication security. The rollout of new technologies also brings increased complexity. When new systems are introduced under time pressure, there’s a higher risk of misconfigurations. In some cases, this can result in 4G/5G networks being less secure than the older 2G or 3G systems they replace.
Another challenge is the lack of transparency for users. To keep interfaces simple, most devices and networks hide technical details, such as which communication protocol is being used (e.g., VoLTE, VoWiFi, RCS) or what security measures are in place (e.g., encryption algorithms, key exchange methods). This limited visibility reduces user awareness and can ultimately weaken the overall security of mobile communications.
To address these challenges, TelCrit aims to increase transparency around mobile network technologies and their security configurations. We are conducting a nationwide study focused on current security practices in Austrian mobile networks, especially in the areas of voice communication (VoLTE) and modern messaging services (VoWiFi and RCS). The goal is to identify potential weaknesses and support improvements, helping make Austria’s mobile infrastructure more secure and resilient.
Project Lead: SBA Research